Know the file before trusting it.
What to check when a public release becomes available. No ISO or production signature is published today.
Start on the official page
A public release must state its version, architecture, size, date, requirements and known issues. A filename or Veskuro logo alone does not establish origin. The private lab build is not a download for users.
Check integrity
A checksum lets you compare a received file with the published digest. A mismatch means the bytes differ and the file should not be used. A checksum alone does not prove who published the file.
Verify the publisher
The release signature and official public key will verify authenticity according to the release procedure. Lab keys are development keys: they are not production keys and do not authorize distribution of the private image.
Before installing
Read the instructions, known issues and requirements for the exact version, and prepare a recoverable copy of your data. Do not disable computer protections based on this guide. Operational instructions will accompany a qualified public installer.